Change authenticity requirements to allow POSTing to the API